Which of the following is the MOST important step in the development of an effective IT governance action plan? 

Answer options:

A. Conducting a business impact analysis (BIA)
B. Preparing a statement of sensitivity
C. Setting up an IT governance framework for the process
D. Measuring IT governance key performance indicators (KPIs)

D